Symantec Developer Group

Hello,

I have a Problem with my SEP and SEPM.

I get following errors:

04/25 14:06:17.287 [2140] <SendRegistrationRequest:>http://192.168.100.216:8014
04/25 14:06:17.287 [2140] <InternetCallback> HttpOpenRequest; Internet status: 60; CtrlBlk: 04782920
04/25 14:06:17.287 [2140] 14:6:17=>Send HTTP REQUEST
04/25 14:06:17.287 [1552] <InternetCallback> HttpSendRequestEx; Internet status: 100; CtrlBlk: 04782920
04/25 14:06:17.318 [2140] AH: (InetWaiting) bFinished is TRUE on CtrlBlk: 04782920
04/25 14:06:17.318 [1552] <InternetCallback> HttpEndRequest; Internet status: 100; CtrlBlk: 04782920
04/25 14:06:17.349 [2140] 14:6:17=>HTTP REQUEST sent
04/25 14:06:17.349 [2140] 14:6:17=>QUERY return code
04/25 14:06:17.349 [2140] 14:6:17=>QUERY return code completed
04/25 14:06:17.349 [2140] <SendRegistrationRequest:>SMS return=400
04/25 14:06:17.349 [2140] <ParseHTTPStatusCode:>400=>400 Bad Request
04/25 14:06:17.349 [2140] <SendRegistrationRequest:>ERR to query content length
04/25 14:06:17.349 [2140] <SendRegistrationRequest:>Content Lenght => 
04/25 14:06:17.349 [2140] HTTP returns status code=400
04/25 14:06:17.349 [2140] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
04/25 14:06:17.349 [2140] <SendRegistrationRequest:>COMPLETED, returned 5
04/25 14:06:17.365 [2140] HEARTBEAT: Check Point 5.1
04/25 14:06:17.365 [2140] NextProxySetting: Cycled through all proxy settings.
04/25 14:06:17.365 [2140] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
04/25 14:06:17.365 [2140] ResetProxySetting: Will now use proxy setting 1
04/25 14:06:17.365 [2140] HEARTBEAT: Check Point 8
04/25 14:06:17.365 [2140] <PostEvent> going to post event=EVENT_SERVER_DISCONNECTED
04/25 14:06:17.365 [2140] <PostEvent> done post event=EVENT_SERVER_DISCONNECTED, return=0
04/25 14:06:17.365 [2140] <RegHeartbeatProc>====== Registration Procedure stops at 14:06:17 ======
04/25 14:06:17.365 [2140] HEARTBEAT: Check Point 10
04/25 14:06:17.865 [2140] HEARTBEAT: Check Point Complete
04/25 14:06:17.865 [2140] <RegHeartbeatProc>Done, Heartbeat=64seconds
04/25 14:06:17.865 [2140] <CheckHeartbeatTimer>====== Heartbeat loop stops at 14:06:17 ======
04/25 14:06:39.453 [2136] <CSyLink::mfn_DownloadNow()>
04/25 14:06:39.453 [2136] </CSyLink::mfn_DownloadNow()>

I have tried:

Remove SEP and install again -> no sucess

Import Communication file -> no sucess

Clean regedit !!

Secars Test return OK !!!!!

DNS and Firewall is not a Problem!!

But I found something interesting:

POST /secreg/secreg.dll?l=2 HTTP/1.1
Host: NT2K12SV02:8014
Content-Length: 1696

..T.K...o...
..#.[v.0..W.2c..'...Q..>3.v.(...Y...$R......_.a...B...[,..z...&".....oe87._...:>.{.....3Gu..G...3.R`.....0..x..._l.Z.q3.fQ.....c.........<j..
....l..4...x.a.....).Z..&..,./?[U$./W.......F.	....2...R.'"yq..9T..8..aJ.<'.c&.L...Q...r..H..
....]=..LtN..?...7Q.......zD..=......o....Fb...]...,.|.....u
.....b........S.#-c.]..O...........Jc.._.w.(.1.l.^.Mr.XE.	.S..z...I@IXp.M."...4.y......uzS....G.nFF>0.p....W...u9.7.,r.\Rh.....W6..&..q..=}..8.	h.(....O....a.2...
.f..v.!9P.wslO.B.....V.^B.b ....?..x.....}V.-V5....-.`....Ve...Ai....$5..../.C................. .J......._..Z.,.....V.......A>...@...A.....*<........zCnU..-e...q..Oy...ir.>UG.y..J?...LV..c..}.M3=...&.....4...o~.Hz..sx....DvA.v ..0.}...o.:J..L...{.....M..W.....:......_s.
.........>..e......F.i.C.h...D....x.p..
t...}n.P......X.?..A....+.Z`...s.)....zb..Y.......V):.......l..
%.$......5..I...W].z..`v.o4.A..Q&.............A....b.W.bt,....D}...."......,O...f..>2,...5Un!.A.y......K.L..H.M.3._.;B.5.^]._L..05.Hd}c|......E.....[.Eg:e.S.M..]..fO?...7..........o,.$....6&.`.~@{.....E.:u<S...?...f......>..	X8%......>...5.c...W..gB.T.A.j......l...4m=....Z..J...x$..>...d..j...l. ..DB...\.3.....p...p..\......{,u.<.B.....<.zl.B.In]....Sb.B!O....H.....F.E.j6B.RbS..6..y.L.2.....1...S.......|.Z.+.0H`Q....?...._.}.....y....;.b. .M......(4d*.>.R..\..c.gjEki....G..............'...4.r'$..f.....,...2X....J.....d...	...M....1..O02enG...*..f..B<..2...8.wh....c..J.....M....1..O02en.......5.......S...M....1..O02en.b....h.....s!.m......L.A)..O{o
...M....1..O02enQ.&..~...i...E...ny....SE...V.......L2.....p.J.y"C......_.wJg...	...
Z4$...Fx............Q.*S3....y...D.G.I..UZ..... x1....0J..kQ.....]*./(..Wd]4...k...-.>^fB+..Qln_o.#..)i....HTTP/1.1 400 Bad Request
Date: Wed, 25 Apr 2018 12:46:18 GMT
Server: Symantec Endpoint Protection Manager
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

33
<head><title>SECARS</title></head>
<body><h1></h1>

0

General to have connection with SEPM is not possible. On the SEPM i have Clients and it´s work very well but to install new client and to have connection with SEPM is not possible.

SEP -> Windows 7 -> Common Client 12.12.1.15

SEPM -> Windows 2012 R2 -> Version 12.1.6 (12.1 RU6 MP5) Build 7004 (12.1.7004.6500)

I know that is not latest version but untill now it´s work well !!

Maybe sameone have a idea what the problem is and how to fix it..

regards

Download and run SymDiad, what does it show? Has something changed recently? Is this all clients?

Hi,

thx for your comment. I did it. They found "Symantec Endpoint Protection definition sets are corrupt". Logical because the client didn´t have connection to the SEPM to download new virus definition. With "Fix Completed" Button, they can´t fix it. I running this "fix" for more that few hours but nothing happend

We don´t change anything with clients. Symantec was still running very well.

The clients how was installed before with this "strange problem", they runs without problems. But if I want now install a new client, then i have problem to get connectiong with the SEPM. I get errors like my first entry... It doees not  matter if this are windows 10 or windows 7.

regards